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Abstract 



Extending the eavesdropping strategy devised by Zhang, Li and Guo [Phys. Rev. A 63, 036301 
(2001)], we show that the multiparty quantum communication protocol based on entanglement 
swapping, which was proposed by Cabello quant-ph/0009025 , is not secure. We modify the 
protocol so that entanglement swapping can secure multiparty quantum communication, such as 
multiparty quantum key distribution and quantum secret sharing of classical information, and show 
that the modified protocol is secure against the Zhang-Li-Guo's strategy for eavesdropping as well 
as the basic intercept-resend attack. 
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I. INTRODUCTION 



Entanglement has been considered as one of the most important resources for quantum 
information processing and quantum communication including quantum key distribution 
(QKD) and quantum secret sharing (QSS). Entanglements can be obtained from several 
methods, one of which is to utilize a projective measurement on multi-particles. If more 
than two particles can be handled then a projective measurement on multi-particles such 
as a Bell-state measurement allows the state of the particles to be entangled, although the 
particles have never been entangled with one another. 

We now consider the following four-particle state, 

(01,02)12 ® (03,04)34 



^ ^ ujdiai -k,ai + l)iA ® (03 + A;, 02 - /)32- 

(1) 



d 

k,l=0 



Here the subscript represents the index of each particle, each aj is an integer running from 

to d — 1, ujfi = exp{27Ti / d) , and 

^ d-l 

{U, V).y = -7^J2< l-^')- ® \^ + ' (2) 

which is one of d- dimensional Bell states. The state in Eq. (P) has mutually entangled 
particles 1 and 2, and mutually entangled particles 3 and 4. There does not exist any 
entanglement between particles 1 and 4, nor between particles 2 and 3 in the state. 

However, after the measurement on particles 1 and 4 (or 2 and 3) by the observable with 
eigenstates (oi — /c, 04 + /)i4 [or (03 + k,a2 — 1)32] for < k,l < d — 1, the state in Eq. ((T} 
becomes a product state of the form {ai — k, 04 + /) 14® (03 + A;, 02 — /)32, whose particles 1 and 
4, and particles 2 and 3 are mutually entangled, respectively. This interesting phenomenon 
is called the entanglement swapping (ES), which was originally proposed by Zukowski et 
al. 1|, was generalized to multipartite quantum systems by Zeilinger et al. [2] and Bose et 
al. 3 1 independently, and was experimentally realized by Pan et al. Furthermore, the 
generalizations of ES for multipartite and arbitrary dimensional quantum systems were also 
presented jsl |^ . These generalizations possess the more significant meaning in view of the 
fact that quantum communications in higher dimensional quantum systems are more secure 



2 



than in two qubits On this account, we consider ci- dimensional quantum systems, called 
qudits, in this paper. 



Recently, several practical applications of ES, such as the purification protocols j8|, |9|, |1 
and the cryptographic protocols jy, ll3|, llJ], have be en prop osed. In particular, 

the ES-based two-party QKD protocol, presented by Cabello juJ, 112, ll3| , permits the se- 
cure key distribution, whose structure is difi^erent from those of the previous QKD proto- 



cols 



Key 
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17| . In addition, the ES-based multiparty quantum communication consisting 
of multiparty QKD and QSS protocols j3, Q was suggested However, this multi- 

party quantum communication can be shown to be insecure by means of a variant of Zhang, 
Li, and Guo's eavesdropping strategy 13]. We call this eavesdropping strategy the Zhang- 
Li-Guo-type (ZLG-type) attack. In this paper, we present the ZLG-type attack applied to 
the multiparty quantum communication protocol, and show that the protocol is not secure 
against the attack. Modifying the protocol in the method analogous to Cabello's modifi- 
cation for the ES-based two-party QKD we also show that there exists a multiparty 
quantum communication protocol which is secure against the ZLG-type attack as well as 
the basic intercept-resend attack. 

This paper is organized as follows. In Sec. |n]we review the original Cabello's protocol. In 
Sec. lIIII we show that the protocol is not secure by employing the ZLG-type attack. In Sec. II VI 
we present the modified protocol which is secure against not only the basic intercept-resend 
attack but also the ZLG-type attack. Finally, in Sec.|3we summarize our results. 



II. CABELLO'S PROTOCOL FOR MULTIPARTY QUANTUM COMMUNICA- 
TION 



Cabello [l^ extended the ES-based QKD protocol between two parties |14i] into multi- 
party quantum communication. In this section, we review the extended protocol for the 
three-party quantum communication Since the three-party quantum communication 

can easily be generalized to the multiparty case, we consider only the three-party case in 
this paper. 

In the beginning, Alice prepares one of rf-dimensional Bell states and one of d- 
dimensional Greenberger-Horne-Zeilinger (GHZ) states [2^, and Bob (Carol) prepares one 
of d-dimensional Bell states. In the protocol, we assume that the information on the initial 
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state is publicly known. We now remark the following two formulas for swapping Bell states 
and GHZ states: 



(Mi,M2)l2®(f 1,^^2,^3)345 
k,l=0 

'S){ui + k,V2-l,vs-l)i45, (3) 

and 

k,l=0 

® iVi + k,V2,U2- l)3i2, (4) 

where (wi, f2, ^3)^^^^ = Z]j=d ^d"' li' J + ^2, j + t^s)^;^^, which is a GHZ state. 
By exploiting the above two formulas, the process can be described as follows. 

(a) Alice makes a Bell measurement on one qudit of the Bell state and one qudit of the 
GHZ state, and then Alice sends one of the other qudits of the GHZ state to Bob 
(Carol). 

Let (ai,a2)A ® {91,92, 93) a ® (&i,&2)b ® (ci,C2)c be the given initial state. Here, the 
subscripts represent the indices of the parties manipulating the state. If we let (^^i — 
/c, 02 + /)a be the result of Alice's measurement for some k and /, then we obtain from 
Eq. (13 that the initial state becomes {91 — k,a2 + I) a ® (ai + k,92 — 1, 93 — /)abc ® 
(&i,&2)b ® (ci,C2)c- 

(b) Bob (Carol) performs a Bell measurement on one qudit of his (her) Bell state and the 
qudit received from Alice. After the measurements. Bob (Carol) sends Alice his (her) 
qudit which is not measured. 

For some and Hi, we let (61 — mi, (72 — 1 — ^2)3 [(ci — ni, (73 — I — 112)0] be the 
measurement result of Bob (Carol). Then it follows from Eq. (0} that the resulting 

state is (^fi - k,a2 + 1)a ® {ai + k + mi + rii, 62 + m2, C2 + r;,2)A ® - mi, g2 - I - 
m2)B ® (ci - ni, 5(3 - / - n2)c- 
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(c) Alice measures the GHZ state, {ai + k + mi+ni, b2 + m2, C2+'n2)A, which consists of her 
own qudit and the qudits received from Bob and Carol, and then publicly announces 
the result of the measurement. Then the final state becomes 



{91 -k,a2 + I) A 

® {ai + k + mi + rii, 62 + '"^2, C2 + r;,2)pub 
(g) (61 - mi, g2-l - 1^12)3 

® (ci-ni,5(3-/-n2)c- (5) 

The correlation in (jSj) allows multiparty QKD and QSS of classical information, si- 
multaneously. 

For the secure communication, legal users check the eavesdropping by comparing random 
subsequences of their key strings with the original correlations. 

We note that the basic intercept-resend attacks analogous to the attack presented in 



12l ]. may destroy the correlations among the keys, since any Eve's attempt to acquire the 
keys may change the result of the public announcement in an unpredictable way. Therefore, 
Cabello's protocol is secure against such kind of attacks. 



III. ZHANG-LI-GUO-TYPE ATTACK ON CABELLO'S PROTOCOL 



Zhang, Li and Guo [13[ proposed a special strategy for eavesdropping, called the ZLG 



type 



attack, which shows that the ES-based two-party QKD protocol presented by Cabello is 
not secure. In this section, we show that the security of Cabello's protocol for the ES-based 
multiparty quantum communication can also be threatened by the ZLG-type attack. The 
eavesdropping strategy is illustrated in Fig. HI and can be described as follows: Initially, 
Eve prepares two Bell states, (ei,e2)E and (/i,/2)e- Thus, the initial state is (ai,a2)A ® 
(gi, 92, 93)a ® (ei, e2)E ® (/i, /2)e ® (h, &2)b ® (ci, 02)0- 

(a) Alice performs a Bell measurement on one qudit of her Bell state and one qudit of her 
GHZ state as in the original Cabello's protocol. 

Then the state becomes {gi -k,a2 + 1) a ® (ai + k,g2- 1, 93 - 1) a ® (ei, e2)E ® (/i, /2)e ® 
(^1, ^2)b ® (ci, €2)0 for some k and /. 
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(b) Eve intercepts two qudits transmitted from Alice and keeps them intact, and then 
sends one qudit of her Bell state to Bob (Carol) as in Fig. ^ (b). Then Bob (Carol) 
makes a Bell measurement on the received qudit and one qudit of his (her) Bell state 
without being concerned of eavesdropping. 

Then the state becomes {gi — k,a2 + I) a ® (oi + k,g2 — I, gs — Oaee ® (ci + ai, 62 + 
a2)EB ® (/i + Pi, C2 + /?2)ec ® {h - «!, 62 - «2)b ® (ci - Pi, 63 - P2)c for some tti and 
Pi. 

(c) After their measurements, Eve intercepts the qudits transmitted from Bob (Carol), 
and measures the Bell state consisting of one of her qudit and the intercepted qudit 
from Bob (Carol). Eve performs the suitable local operation on the qudits which she 
intercepts from Alice, according to the measurement result of the GHZ state as in the 
following: If we let (ci + ai, 62 + o:2)e ® (/i + Pi, C2 + P2)e be the measurement result 
of the two Bell states, then Eve applies the local operation 

where X and Z are the unitary operations defined by 

X : \j) ^ I j + 1 mod d) 

Z -Ij) ^ \J inod d) . (7) 

Using the following relation 

/ (g) Z^X" (g) X''{u, v,w) = {u + p,v + q,w + r), (8) 
the resulting state can be described by {gi — /c, 02 + /)a (g (o-i + A; + ai + 62 — 62 + 

"2 + 6-2 - I, C2 - 63 + /?2 + 6-3 - OaEE ® (Cl + «!, &2 + a2)E ® (/l + Pi, C2 + p2)E ® (&1 - 

0:1,62 — 02)3 ® (ci — Pi, 63 — /32)c5 after applying the local operation in (0). 

(d) Eve returns the two qudits to Alice after the above operations. Then Alice measures 
the GHZ state, and publicly announces the result. 

Then the final state becomes 
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(gi - k,a2 + 1)a ® {ai + k + ai + Pi,b2 - (e2 - 02) +92-1,02- (es - P2) +93- Opub 
(g) (ei + ai, 62 + a2)E ® (/i + A, C2 + /52)e 

(g) (61 - «!, 62 - 02)8 ® (Ci - 63 - p2)c- (9) 

Alice, Bob and Carol now attempt checking the eavesdropping by comparing random sub- 
sequences of their measurement results. However, legal users cannot verify the presence 
of eavesdropping since no errors can be introduced from this particular attack as seen in 
Eq. (jni) and Eq. Q. Moreover, Eve can perfectly obtain information on the keys, which can 
readily be shown from Eq. Q. Therefore, we can prove that Cabello's multiparty quantum 
communication protocol is insecure against the ZLG-type attack. 



IV. SECURE PROTOCOL FOR MULTIPARTY QUANTUM COMMUNICATION 

In the preceding section, we have shown that Cabello's protocol for multiparty quantum 
communication is not secure against a particular eavesdropping attack, the ZLG-type attack. 
In this section we suggest a modified protocol, which is secure against not only the basic 
intercept-resend attack but also the ZLG-type attack. 



A. Our modified protocol 

The basic idea of our modification results from Cabello's modification for the ES-based 
two-party QKD We now remark the following two formulas 

(ui,U2,M3)l23®[(-^®/)(0,0)45] 
^ d~l 

-1 J2 ''d'^V ® / ® - k, U2, 1)125] 



d 

k,l=0 



® (/c, - /)43, (10) 



[(/® J^® J)(Mi,M2,M3)i23] ® [(J^®/) (0,0)45 

d-1 



d 



\ ^Uj'/\{I®T®T){Ui-k,U2,l)l25] 
k,l=0 

®(fc,U3-043, (11) 
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which can be obtained from the straightforward calculations. Here, T is the ci-dimensional 
quantum Fourier transform (QFT) defined by t— > {\j\fd) Xlj'^d'^li)- The modified pro- 
tocol is illustrated in Fig. El and is described as follows. 

(a) For convenience, legal users initially prepare the following state: (0, 0)a ® (0, 0, 0)a ® 
(0,0)b® (0,0)c. 

(b) Alice sends one qudit of her GHZ state to Bob (Carol). Bob (Carol) also sends one 
qudit of his (her) Bell state to Alice, and then randomly applies either the QFT or 
the identity operation to the other qudit of his (her) Bell state. Alice performs a Bell 
measurement on her qudit of the GHZ state and one qudit of her Bell state, and Bob 
(Carol) also performs a Bell measurement on the qudit received from Alice and the 
other qudit of his (her) state. 

There exist three cases in this step: (i) Both Bob and Carol apply the identity oper- 
ation, (ii) Only one of them applies the QFT, and (iii) Both of them apply the QFT. 
The case (i) is the same as the case of the original Cabello's protocol. In the case 
(ii), if it is Carol who applies the QFT, and (— k, A)a, (— yUi, — yU2)B and {—v\,—V2)c 
are the measurement results of Alice, Bob and Carol respectively, then Alice's three- 
particle state becomes (/ (g) / ® jF)(fi; + + z^i, —A + — A + z/2)a by Eq. (fTUIl . 
In the case (iii), if (— k, A)a, (— /Ui, — At2)B and [—v\,—v-2)g are the measurement re- 
sults of Alice, Bob and Carol respectively, then Alice's three-particle state becomes 
(J® J^O J^)(K + /ii + z/i,-A + /i2,-A + z/2)A by Eq. ^ and Eq. (HH). 

(c) Bob (Carol) announces his (her) operation chosen in the previous step. Alice performs 
the inverse of his (her) operation to the qudit received from him (her). Alice now mea- 
sures the GHZ state which is automatically made from the legal user's measurements, 
and publicly announces the result. Then the final state becomes 

(-K, A)a 

®{k + /il + I/l, -A /i2, -A + Z/2)pub 

(g)(-/il, -/i2)B ® (-Z^l, -Z^2)c- (12) 



For the secure communication, legal users check the eavesdropping by comparing random 
subsequences of key strings. 
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As one can see in Eq. (0) and Eq. (fT^. our modified protocol provides legal users with 
the same correlation as that in the original Cabello's protocol. Furthermore, legal users 
can detect any eavesdropping unless Eve knows Bob and Carol's choices of their operations 
beforehand. We are now going to discuss the security of our modified protocol in detail. 

B. Security check 

As mentioned in the previous section, it is impossible for Eve to get all information 
unless she knows Bob and Carol's decisions beforehand. More precisely, legal users can 
detect Eve's presence with the probability not less than 1 — [{d + l)/2d]'^ for each testing 
key, since after applying the QFT to one qudit of a Bell state one can obtain one of Bell 
states as the Bell-measurement result with the probability at most 1/d. Thus if legal users 
check sufficiently large m keys, with the probability not less than 1 — [{d + l)/2d]'^"^, Eve 
can be detected. Eve can be detected with the probability, not less than We note that in 
the A^-party quantum communication the probability to detect Eve in the ZLG-type attack, 
is at least 1 — [{d + l)/2c/]^~^ for each testing key. Therefore, our modified protocol for 
multiparty quantum communication is secure against the ZLG-type attack. 

Now, we consider the basic intercept-resend attacks on the protocol. In the three-party 
quantum communication, the basic intercept-resend attacks can be divided into two cases, 
one-party attack and two-party attack. While from the one-party attack Eve can acquire 
the information on the keys only for the QKD, from the two-party attack Eve can acquire 
the information on the keys for the QSS as well as the QKD. In order to investigate the 
security of the protocol, we are going to calculate the probability with which legal users can 
detect Eve for each case. 

1. One-party attack 

The one-party attack on our modified protocol is illustrated in Fig.|Hland can be described 
as follows. 

(a) Legal users prepare the same qudits as those in our modified protocol, and Eve prepares 
two Bell states to obtain the information on Bob's key. 
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(b) When Alice sends one qudit of her GHZ state to Bob (Carol), and Bob (Carol) sends 
Alice one qudit of his (her) Bell state, Eve intercepts the qudit transmitted from Alice 
to Bob and the qudit transmitted from Bob to Alice, and sends one qudit of her 
one Bell state to Alice and one qudit of the other Bell state to Bob. Bob (Carol) 
randomly applies either the QFT or the identity operation to the other qudit of his 
(her) Bell state. Alice and Bob (Carol) perform Bell measurements as in the our 
modified protocol. While Alice and Bob (Carol) perform Bell measurements. Eve also 
performs a Bell measurement on the qudit which she intercepts from Alice and her 
qudit of the Bell state as in Fig. El (b). 

(c) After Bob (Carol) announces his (her) operation chosen in the previous step. Eve 
performs the inverse of his operation and then measures a Bell measurement on the 
state containing the qudit. 

Finally, legal users check the correlation among their measurement results. Eve's presence 
can be detected since Eve cannot fabricate the correlation among the legal users' keys 
without knowing Bob and Carol's choices of the operations in Step (b). We now remind that 
if one applies the QFT to one qudit of a Bell state (or a GHZ state) then with the probability 
at most 1/d one can get one of Bell states (or GHZ states) using a Bell-state measurement 
(or a GHZ-state measurement). Thus, we can easily obtain that the probability of revealing 
the presence of Eve, who attempts the one-party attack, is not less than 1 — (rf + l)/2d? for 
each testing key. 

In the A^-party quantum communication, the probability to detect Eve for the one-party 
attack is also at least 1 — {d + l)/2d'^. Thus our modified protocol is secure against the 
one-party attack since the probability for m testing keys is not less than l — [{d+ l)/2d'^]'^. 
Furthermore, we can obtain from these probabilities the fact that the higher the dimension 
of quantum system is, the more secure the communication becomes. 

2. Two-party attack 

The two-party attack on our modified protocol is illustrated in Fig. |3 and is described as 
follows. 
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(a) The initial states of legal users are the same as those in our modified protocol. Eve 
prepares two Bell states and one GHZ state. 

(b) When Alice sends one qudit of her GHZ state to Bob (Carol), and Bob (Carol) sends 
Alice one qudit of his (her) Bell state, Eve intercepts the transmitted qudits, and sends 
her qudits to legal users instead; she sends one qudit of each Bell state to Alice and 
one qudit of her GHZ state to Bob (Carol). Bob (Carol) randomly applies either the 
QFT or the identity operation to the other qudit of his (her) Bell state. Alice, Bob 
and Carol perform Bell measurements as in the our modified protocol. While they 
perform Bell measurements. Eve performs two Bell measurements on her own qudits 
and the qudits which she intercepts from Alice as in Fig. |3 (b). 

(c) After Bob (Carol) announces his (her) operation chosen in the previous step. Eve 
performs the inverse of his (her) operation to the qudit received from him (her), and 
then measures the GHZ state containing the qudits. 

In this eavesdropping strategy. Eve cannot forge the exact correlation on the keys for the 
three-party quantum communication without knowing Bob's (Carol's) decision to choose his 
(her) own operation. Thus, legal users can detect Eve's intervention by publicly comparing a 
sufficiently large random subset of their sequences of key strings. We can straightforwardly 
show that the probability with which Eve can be detected in the three-party quantum 
communication, is at least 

(-) 

for each testing key. Thus our modified protocol is secure against the two-party attack since 
the probability for m testing keys is not less than 1 — [(2(f' + d + l)/4d^]"^. 

In order that Eve acquire the keys for the QSS in the multiparty quantum communication, 
she should access the qudits transmitted to all legal users. Thus, employing Eq. (fTn|) . 
one can obtain that the probability of detecting Eve's presence in the A^-party quantum 
communication is not less than 

rf(d+ 1)^-1 + 1 

for each testing key. 
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It follows from the above probability in Eq. ()14p that as the dimension of the system 
or the number of parties increases, the multiparty quantum communication including the 
multiparty QKD and QSS is more secure against the two-party attack. 

V. CONCLUSIONS 

In this paper, we presented the ZLG-type attack applied to Cabello's protocol for the mul- 
tiparty quantum communication consisting of the multiparty QKD and the QSS of classical 
information, and showed that the protocol is not secure against the attack. Modifying the 
protocol, we also showed that there exists a multiparty quantum communication protocol 
which is secure against the ZLG-type attack as well as the basic inter cept-resend attack. 

Cabello's ES based protocol |12i] simultaneously makes the multi-party QKD and the QSS 
of classical information possible. Furthermore, it has a merit that no transmitted quantum 
data are rejected as mentioned in Our work shows that we can obtain the secure 

protocol with those advantages by exploiting an appropriate modification process. 

Acknowledgments 

The authors acknowledge the KIAS Quantum Information Group for useful discussions. 
S.L. is supported by a KIAS Research Fund (No. 02-0140-001), J.K. by a Korea Research 
Foundation Grant (KRF-2002-070-C00029), and S.D.O. by a Korea Science and Engineering 
Foundation Grant (R06-2002-007-01003-0). 



[1] M. Zukowski, A. Zeilinger, M.A. Horne, and A.K. Ekert, Phys. Rev. Lett. 71, 4287 (1993). 

[2] A. Zeilinger, M.A. Horne, H. Weinfurter, and M. Zukowski, Phys. Rev. Lett. 78, 3031 (1997). 

[3] S. Bose, V. Vedral, and P.L. Knight, Phys. Rev. A 57, 822 (1998). 

[4] J-W. Pan, D. Bouwmeester, H. Weinfurter, A. Zeilinger, Phys. Rev. Lett. 80, 3891 (1998). 

[5] J. Bouda and V. Buzek, J. Phys. A 34, 4301 (2001). 

[6] V. Karimipour, A. Bahraminasab, and S. Bagherinezhad, Phys. Rev. A 65, 042320 (2002). 

[7] D. Kaszlikowski, P. Gnacinnski, M. Zukowski, W. Miklaszewski, and A. Zeilinger, Phys. Rev. 
Lett. 85, 4418 (2000). 



12 



[8] S. Bose, V. Vedral, and P.L. Knight, Phys. Rev. A 60, 194 (1999). 

[9] L. Hardy and D.D. Song, Phys. Rev. A 62, 052315 (2000). 

[10] B-S. Shi, Y-K. Jiang, and G-C. Guo, Phys. Rev. A 62, 054301 (2000). 

[11] A. Cabello, Phys. Rev. A 61, 052312 (2000). 

[12] A. Cabello, |quant-ph/0009025| 

[13] Y-S. Zhang, C-F. Li, and G-C. Guo, Phys. Rev. A 63, 036301 (2001). 

[14] A. Cabello, Phys. Rev. A 63, 036302 (2001); Phys. Rev. A 64, 024301 (2001). 

[15] C.H. Bennett and G. Brassard, in Proceeding of the IEEE International Conference on Com- 
puters, Systems and Signal Processing, Bangalore, India (IEEE, New York, 1984), p. 175. 

[16] A.K. Ekert, Phys. Rev. Lett. 67, 661 (1991). 

[17] C.H. Bennett, Phys. Rev. Lett. 68, 3121 (1992). 

[18] M. Hillery, V. Buzek, and A. Berthiaume, Phys. Rev. A 59, 1829 (1999). 

[19] A. Karlsson, M. Koashi, and N. Imoto, Phys. Rev. A59, 162 (1999). 

[20] D.M. Greenberger, M.A. Horne, and A. Zeilinger, in Bell's Theorem, Quantum Theory, and 
Conceptions of the Universe, edited by M. Kafatos (Kluwer, Dordrecht, 1989), p. 69. 



13 




FIG. 1: The ZLG-type attack on Cabello's protocol for the three-party quantum communication: 
The soHd hues and the dashed hues represent the entanglement given to legal users and Eve, 
respectively. The dotted ellipses and the dotted box represent performing Bell measurements and 
applying the local operation in Eq. 0, respectively. 



14 



Alice 



• • 




I 



I 



Carol 




Alice 

• • 




5 ' or / ? ' or / 



Carol 



(a) (b) (c) 

FIG. 2: Our modified protocol: The dotted box represents applying the local operation, which 
is randomly the QFT (or the inverse of the QFT) or the identity operation. In the ZLG-type 
attack Eve cannot fabricate the correlation among the keys of legal users without knowing Bob 
and Carol's choices of the operation in Step (b). 
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FIG. 3: One-party attack on our modified protocol: From this attack Eve can acquire the infor- 
mation on the keys only for the three-party QKD. 
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FIG. 4: Two-party attack on our modified protocol: Prom this attack Eve can acquire the infor- 
mation on the keys for the QSS as well as the QKD. 
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